Remarks and Arguments 

Claims 1 -4, 6-1 4, 1 6-24 and 26-30 were presented for examination. Claims 1,11 
and 21 have been amended. 

Claims 1 -4, 6, 8, 1 1 -1 4, 1 6, 1 8, 21 -24, 26 and 28 have been rejected under 35 
U.S.C. §1 03(a) as obvious over PCT Patent Publication No. WO 2002/100037 (Shen, 
previously cited) in view of U.S. Patent No. 7,171 ,567 (Bayer.) The examiner 
comments that the Shen reference discloses all of the claimed limitations with the 
exception that it does not disclose computing a document identifier that is related to, but 
cannot be derived solely from, the encrypted content of that document. However, the 
examiner asserts that the Bayer patent shows the step of computing a document 
identifier as the combined value of the disclosed RespondentID, the ViewerlD, the 
SurveylD and the ContentlD. The examiner concludes that it would have been obvious 
to combine the teachings of Shen and Bayer to provide an improved system for 
protecting information over the Internet. 

The Shen reference was discussed in detail in a previous response filed on 
January 31, 2007. As noted in that response and by the examiner, there is no 
disclosure in Shen that the encrypted documents are stored at the download site in 
encrypted form together with document identifiers that are computed for each document 
using the encrypted document content for that document but which cannot be derived 
solely from the encrypted content of that document. 

The Bayer patent discloses an automated survey system in which a survey 
participant registers with the survey system and receives a respondent ID and viewer 
software, which, when installed, generates a unique viewer ID. When a survey 
participant is invited to participate in a survey, a server in the system sends encrypted 
survey information with a content ID to the participant. After the participant receives the 
encrypted information, he or she sends a request for a decryption key back to the 
server. The request includes the respondent ID, the viewer ID, the survey ID and the 
content ID. If the IDs in the request match those stored on the server, the server 
returns a decryption key that allows the viewer to decrypt and display the survey 
information. 
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Thus, the Bayer patent teaches a system in which a request to obtain access to 
encrypted content results in a download of the encrypted content to a user's computer 
together with pre-computed ID information. This ID information is then returned to the 
content publisher where the content publisher verifies the ID information and downloads 
a decryption key. This system operates because the content recipient has been pre- 
registered with the publisher and the ID information is all pre-computed. For example, 
the respondent ID in Bayer is computed in the survey server and assigned to a 
respondent at the time that the respondent is invited to participate in surveys (See 
Bayer , column 7, lines 5-1 1 ). Consequently, it is not related to the survey content. 

Similarly, the viewer ID is computed at the time when the viewer is installed in the 
respondent's computer and registered with the server ( Bayer , column 7, lines 24-39.) 
Accordingly, it is also not related to the survey content. The survey ID is a unique 
identifier for a survey (Bayer, column 4, lines 59-61). There is no indication In Bayer 
that the Survey ID is computed from the survey content. Finally, the content ID is 
generated at the time that the content is encrypted ( Bayer , column 6, lines 21-31). Note 
that the content ID is not generated from the encrypted content since an administrative 
server generates the content ID before encryption and then provides the content ID and 
the unencrypted content to an encryption server that actually encrypts the content and 
the content ID ( Bayer , column 6, lines 21-27.) Thus, the content ID is more akin to a 
universal identifier. Therefore, none of the IDs generated in the Bayer patent are 
computed from the document (survey) content. 

Therefore, neither the Shen reference nor the Bayer disclose computing a 
content ID in the viewer from the encrypted content in such a manner that the content 
ID cannot be solely determined from the encrypted content. Therefore, the combination 
of these two references cannot teach or suggest this step since neither reference 
teaches or suggests it. It is important that the document identifier can be computed 
from the document content, because the encrypted document content, the decryption 
keys and the content server itself are all downloaded to an unsecure site as set forth in 
the present specification starting at page 17, paragraphs 73-76. A client, who has 
access to the encrypted content (but not directly to the decryption key necessary to 
decrypt the document) can then use this encrypted content to compute a document 
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identifier (OID). The OID can then be used at the local content server to retrieve the 
decryption key. 

Independent claims 1,11 and 21 have been amended to make it clear that the 
document identifier is computed from the encrypted document content. For example, 
claim 1 now recites, in lines 7-9, "...at the publishing site, computing for each document 
a document identifier that is computed from, but cannot be derived solely from, the 
encrypted content of that document..." Consequently, claims 1,11 and 21 patentably 
distinguish over the cited combination of references. Claims 2-4, 6 and 8 are 
dependent on claim 1 and are thus, also allowable. Claims 12-14, 16 and 18 are 
dependent on claim 1 1 and are thus, also allowable. Finally, claims 22-24, 26 and 28 
are dependent on claim 21 and are allowable. 

In light of the forgoing amendments and remarks, this application is now believed 
in condition for allowance and a notice of allowance is earnestly solicited. If the 
examiner has any further questions regarding this amendment, she is invited to call 
applicants' attorney at the number listed below. The examiner is hereby authorized to 
charge any fees or direct any payment under 37 C.F.R. §§1 .17, 1 .16 to Deposit Account 
number 50-3969. 

Respectfully submitted 

/paul e. kudirka/ Date: 2007-07-16 

Paul E. Kudirka, Esq. Reg. No. 26,931 
LAW OFFICES OF PAUL E. KUDIRKA 
Customer Number 64967 
Tel: (617) 357-0010 Fax: (617) 357-0035 
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